@foal/core
Version:
Full-featured Node.js framework, with no complexity
10 lines (9 loc) • 433 B
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.shouldVerifyCsrfToken = shouldVerifyCsrfToken;
const core_1 = require("../../../core");
function shouldVerifyCsrfToken(request, options) {
return (options.cookie === true &&
(options.csrf ?? core_1.Config.get('settings.session.csrf.enabled', 'boolean', false)) &&
['DELETE', 'PATCH', 'POST', 'PUT'].includes(request.method));
}